Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
kubb-labs/kubb
main @ 4ecda26
11
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Auth Bypass: 7 prior fixes. Scrutinize any change in this area.
packages/agent/server/utils/token.ts: most-fixed (5 issues). Treat as high-risk during review.
6 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The machine token generation was historically vulnerable to predictable fallbacks (using MAC addresses and hostnames), missing environment secrets, and volatile token lifetimes. This allowed attackers to bypass session authentication.
Sandbox Escape: The studio plugin lacked robust execution context verification, allowing code generator commands to bypass sandbox modes, perform arbitrary local file system writes, and execute unauthorized input overrides.
Path Traversal: Insufficient validation of OpenAPI schema names and operation paths during path resolution enabled directory traversal attacks, permitting generated files to write outside the intended output directory boundaries.